How to Gather alert/alarm history post clearing them manually from vCenter server

Products

• VMware vSphere ESXi

Issue/Introduction

 This article outlines the process for gathering alert and alarm details after alerts have been manually cleared from the vCenter Server Appliance.

Environment

vCenter 7.X
vCenter 8.X

Resolution

To access triggered alert information from the time of the last vCenter reboot, follow these steps:

• Connect to vCenter via SSH as root.
• From the VCSA shell, use the command journalctl -b to retrieve old events and logs.
• Alert and alarm details will be present in the journalctl output.

Note: Log data may be overwritten, depending on the time elapsed since the event occurred.